Privacy Policy
This policy explains how BaseStation Private Limited (“we”, “us”) processes personal data when merchants install and use DropScan Local, a Shopify app for local delivery fulfillment.
1. Roles
- The merchant (Shopify store) is the controller of their customers’ personal data.
- BaseStation Private Limited is the processor acting on the merchant’s documented instructions (including Shopify compliance webhooks). See our Data Processing Agreement.
2. Data we process
| Data | Purpose |
|---|---|
| Customer name | So delivery staff know who to hand the package to |
| Customer phone | Driver call / coordination for delivery |
| Delivery address | Navigation to the delivery destination |
| Shopify order id / name, line-item summary | Match packages to fulfillment orders and print stickers |
| Driver GPS, IP, user agent (at scan time) | Proof of delivery / fraud resistance |
| Staff account email / name / phone | Invite and authenticate delivery staff |
| Merchant shop profile & billing summaries | App install, subscription, and usage charges via Shopify |
We deliberately do not store customer email, billing address, or payment card data for delivery ops. Shopify order webhook bodies are used transiently (or not persisted in queues) and destination fields are taken from fulfillment-order APIs.
3. Legal basis / purpose limitation
Processing is limited to providing local delivery fulfillment and proof of delivery for the merchant’s orders (performance of the merchant–customer contract and the merchant’s instructions). We do not use customer data for marketing, profiling, advertising, or sale to third parties.
4. Sharing and sub-processors
We do not sell personal data. We do not share customer personal data with third parties for their own purposes. Infrastructure sub-processors that may process data on our behalf:
- Railway (application hosting, managed Postgres, optional Redis)
- Cloudflare (staff Progressive Web App hosting / CDN)
- Shopify (platform APIs and billing; merchant’s processor relationship)
Founder alert channels (e.g. Mattermost / Telegram) receive operational notifications without customer personal data payloads for GDPR data-request events.
5. Retention
- Customer name, phone, and delivery address on package records in a terminal status (delivered, left at door, failed, refused, or undelivered) are automatically scrubbed after 90 days.
- Driver scan GPS, IP, and user-agent fields are scrubbed on the same 90-day schedule.
- Activity-log payloads that may contain operational details are redacted after 90 days.
-
Shopify
customers/redactandshop/redactwebhooks delete matching operational data earlier when required. - Merchant billing summaries (period, pickup count, amount, Shopify usage-record id) may be retained for subscription and charge audit — these are not customer PII.
- Database backups are retained for a bounded window (target ≤ ~35 days); see our infrastructure encryption checklist.
6. Security
- HTTPS / TLS for the public app URL
- Encryption at rest for database volumes (hosting provider)
- Shopify access tokens and agency MFA secrets encrypted at rest (AES-256-GCM)
- Staff passwords hashed with bcrypt; staff passwords require length and complexity rules
- Agency (founder) access requires TOTP MFA
- Security incident response policy
7. Data subject rights
Customers should contact the merchant (store) first.
Merchants can exercise rights via Shopify’s mandatory compliance
webhooks (customers/data_request,
customers/redact, shop/redact), which we
implement end-to-end. Merchants or customers may also email
[email protected]
for assistance.
8. International transfers
Data is hosted on our infrastructure providers’ regions as configured for the production project. Where transfers occur, we rely on appropriate safeguards offered by those providers and Shopify’s platform terms.
9. Changes
We may update this policy as the product evolves. Material changes will be reflected by updating the effective date on this page and, where appropriate, notifying merchants through the app or Partner channels.
10. Contact
BaseStation Private Limited
Email:
[email protected]
Related:
Data Processing Agreement ·
Incident response